Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tincan phplist 1.1.5b vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2009-0422
Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and previous versions, when register_globals is disabled, allows remote malicious users to include and execute arbitrary local files via directory traversal sequences in the _SERVER[ConfigFile] paramet...
Tincan Phplist 2.7.2Tincan Phplist 2.8.2Tincan Phplist 2.10.6Tincan Phplist 2.10.7Tincan Phplist 2.6.0Tincan Phplist 2.5.8Tincan Phplist 2.5.0Tincan Phplist 2.4.0Tincan Phplist 2.2.1Tincan Phplist 2.2.0Tincan Phplist 1.9.1Tincan Phplist 1.9.0Tincan Phplist 2.8.12Tincan Phplist 2.10.1Tincan Phplist 2.8.7Tincan Phplist 2.6.4Tincan Phplist 2.5.7Tincan Phplist 2.5.6Tincan Phplist 2.3.4Tincan Phplist 2.4.7Tincan Phplist 2.1.4Tincan Phplist 2.1.3
5
CVSSv2
CVE-2008-5887
phplist prior to 2.10.8 allows remote malicious users to include files via unknown vectors, related to a "local file include vulnerability."
Tincan Phplist 2.6.5Tincan Phplist 2.7.1Tincan Phplist 2.10.4Tincan Phplist 2.10.5Tincan Phplist 2.6.3Tincan Phplist 2.6.0Tincan Phplist 2.5.1Tincan Phplist 2.5.0Tincan Phplist 2.3.0Tincan Phplist 2.2.1Tincan Phplist 1.9.2Tincan Phplist 1.9.1Tincan Phplist 1.6.0Tincan Phplist 1.5.1Tincan Phplist 1.1.5Tincan Phplist 1.1.5bTincan Phplist 2.8.12Tincan Phplist 2.10.1Tincan Phplist 2.6.4Tincan Phplist 2.6.2Tincan Phplist 2.5.6Tincan Phplist 2.5.5
4.3
CVSSv2
CVE-2011-1682
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList 2.10.13 and previous versions allow remote malicious users to hijack the authentication of administrators for requests that (1) create a list or (2) insert cross-site scripting (XSS) sequences. NOTE: this issue...
Tincan Phplist 2.7.2Tincan Phplist 2.8.2Tincan Phplist 2.10.7Tincan Phplist 2.10.8Tincan Phplist 2.6.1Tincan Phplist 2.6Tincan Phplist 2.5.5Tincan Phplist 2.5.4Tincan Phplist 2.5.3Tincan Phplist 2.3.3Tincan Phplist 2.3.2Tincan Phplist 2.1.1Tincan Phplist 2.1.0Tincan Phplist 1.6.4Tincan Phplist 1.6.3Tincan Phplist 1.3.5Tincan Phplist 1.1.7Tincan Phplist 1.0.1Tincan Phplist 1.0Tincan Phplist 2.9.5Tincan Phplist 2.8.12Tincan Phplist 2.10.1
6.8
CVSSv2
CVE-2011-0748
Multiple cross-site request forgery (CSRF) vulnerabilities in phpList prior to 2.10.13 allow remote malicious users to hijack the authentication of administrators for requests that (1) add or (2) edit administrator accounts.
Tincan Phplist 2.8.2Tincan Phplist 2.8.12Tincan Phplist 2.10.7Tincan Phplist 2.10.8Tincan Phplist 2.6.1Tincan Phplist 2.6Tincan Phplist 2.5.3Tincan Phplist 2.5.2Tincan Phplist 2.3.2Tincan Phplist 2.3.1Tincan Phplist 2.1.0Tincan Phplist 1.9.3Tincan Phplist 1.6.3Tincan Phplist 1.6.1Tincan Phplist 2.6.5Tincan Phplist 2.7.1Tincan Phplist 2.7.2Tincan Phplist 2.10.5Tincan Phplist 2.10.6Tincan Phplist 2.6.4Tincan Phplist 2.6.2Tincan Phplist 2.5.5
4.3
CVSSv2
CVE-2012-5228
Cross-site scripting (XSS) vulnerability in admin/index.php in phplist 2.10.9, 2.10.17, and possibly other versions prior to 2.10.19 allows remote malicious users to inject arbitrary web script or HTML via the testtarget parameter. NOTE: some of these details are obtained from th...
Tincan Phplist 2.10.17Tincan PhplistTincan Phplist 2.10.16Tincan Phplist 2.10.15Tincan Phplist 2.10.4Tincan Phplist 2.10.11Tincan Phplist 2.10.10Tincan Phplist 2.6.2Tincan Phplist 2.6.1Tincan Phplist 2.6.5Tincan Phplist 2.6.4Tincan Phplist 2.6.0Tincan Phplist 2.2.0Tincan Phplist 2.1.4Tincan Phplist 2.4.0Tincan Phplist 2.3.4Tincan Phplist 1.6.0Tincan Phplist 1.6.1Tincan Phplist 1.9.2Tincan Phplist 1.9.3Tincan Phplist 1.0Tincan Phplist 1.1.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook